<!doctype html>


<html>
<head>
  <link rel="shortcut icon" href="static/images/favicon.ico" type="image/x-icon">
  <title>html (Closure Library API Documentation - JavaScript)</title>
  <link rel="stylesheet" href="static/css/base.css">
  <link rel="stylesheet" href="static/css/doc.css">
  <link rel="stylesheet" href="static/css/sidetree.css">
  <link rel="stylesheet" href="static/css/prettify.css">

  <script>
     var _staticFilePath = "static/";
     var _typeTreeName = "goog";
     var _fileTreeName = "Source";
  </script>

  <script src="static/js/doc.js">
  </script>


  <meta charset="utf8">
</head>

<body onload="grokdoc.onLoad();">

<div id="header">
  <div class="g-section g-tpl-50-50 g-split">
    <div class="g-unit g-first">
      <a id="logo" href="index.html">Closure Library API Documentation</a>
    </div>

    <div class="g-unit">
      <div class="g-c">
        <strong>Go to class or file:</strong>
        <input type="text" id="ac">
      </div>
    </div>
  </div>
</div>





<div class="colmask rightmenu">
<div class="colleft">
    <div class="col1">
      <!-- Column 1 start -->

<div id="title">
       <span class="fn">labs.html</span>
</div>

<hr/>


  <h2>Classes</h2>
 <div class="fn-constructor">
        <a href="class_goog_labs_html_Sanitizer.html">
          goog.labs.html.Sanitizer</a><br/>
        <div class="class-details">A sanitizer that converts untrusted, messy HTML into more regular HTML
that cannot abuse high-authority constructs like the ability to execute
arbitrary JavaScript.
</div>
 </div>
   
<br/>

  <div class="legend">
        <span class="key publickey"></span><span>Public</span>
        <span class="key protectedkey"></span><span>Protected</span>
        <span class="key privatekey"></span><span>Private</span>
  </div>









<div class="section">
  <table class="horiz-rule">


  </table>
</div>




  <h2>Global Functions</h2>





<div class="section">
  <table class="horiz-rule">


     <tr class="even entry public">
       <td class="access"></td>






  <td>
    <a name="goog.labs.html.attributeRewriterPresubmitWorkaround"></a>


     <div class="arg">
       <img align="left" src="static/images/blank.gif">

        <span class="entryNamespace">goog.labs.html.</span><span class="entryName">attributeRewriterPresubmitWorkaround<span class="args">()</span>
        </span>
      </div>


     <div class="entryOverview">
       g4 presubmit complains about requires of this file because its clients
don't use any symbols from it outside JSCompiler comment annotations.
genjsdeps.sh doesn't generate the right dependency graph unless this
file is required.
Clients can mention this noop.

     </div>

   
  </td>


  <td class="view-code">
     <a href="local_closure_goog_labs_html_attribute_rewriter.js.source.html#line74">code &raquo;</a>
  </td>
     </tr>


  </table>
</div>



  <h2>Global Properties</h2>





<div class="section">
  <table class="horiz-rule">


     <tr class="even entry public">
       <td class="access"></td>





  <a name="goog.labs.html.AttributeRewriter"></a>

  <td>


     <div class="arg">
        <img align="left" src="static/images/blank.gif">

        <span class="entryNamespace">goog.labs.html.</span><span class="entryName">AttributeRewriter</span>
        : 
     </div>


     <div class="entryOverview">
       A function that takes an attribute value, and returns a safe value.
<p>
Since rewriters can be chained, a rewriter must be able to accept the output
of another rewriter, instead of just a string though a rewriter that coerces
its input to a string before checking its safety will fail safe.
<p>
The meaning of the result is:
<table><tr><td><code> null</code></td><td>Unsafe.  The attribute should not be output.</td></tr><tr><td>a string</td><td>The plain text (not HTML-entity encoded) of a safe attribute
          value.</td><tr><td>a <code> goog.html.SafeHtml</code></td><td>A fragment that is safe to be included as embedded HTML as in
          <code> &lt;iframe srchtml="..."&gt;</code>.</td></tr><tr><td>a <code> goog.html.SafeUrl</code></td><td>A URL that does not need to be further checked against the URL
          white-list.</td></tr><tr><td>a <code> goog.html.SafeStyle</code></td><td>A safe value for a <code>style="..."</code> attribute.</td></tr></tr></table><p>
Implementations are responsible for making sure that "safe" complies with
the contract established by the safe string types in <code> goog.html</code>.
</p></p></p>
     </div>

  </td>


  <td class="view-code">
     <a href="local_closure_goog_labs_html_attribute_rewriter.js.source.html#line64">Code &raquo;</a>
  </td>
     </tr>


     <tr class="odd entry public">
       <td class="access"></td>





  <a name="goog.labs.html.AttributeValue"></a>

  <td>


     <div class="arg">
        <img align="left" src="static/images/blank.gif">

        <span class="entryNamespace">goog.labs.html.</span><span class="entryName">AttributeValue</span>
        : 
     </div>


     <div class="entryOverview">
       The type of an attribute value.
<p>
Many HTML attributes contain structured data like URLs, CSS, or even entire
HTML documents, so the type is a union of several variants.

</p>
     </div>

  </td>


  <td class="view-code">
     <a href="local_closure_goog_labs_html_attribute_rewriter.js.source.html#line30">Code &raquo;</a>
  </td>
     </tr>


     <tr class="even entry public">
       <td class="access"></td>





  <a name="goog.labs.html.SanitizerTest"></a>

  <td>


     <div class="arg">
        <img align="left" src="static/images/blank.gif">

        <span class="entryNamespace">goog.labs.html.</span><span class="entryName">SanitizerTest</span>
        : 
     </div>


     <div class="entryOverview">
       <span class='nodesc'>No description.</span>
     </div>

  </td>


  <td class="view-code">
     <a href="local_closure_goog_labs_html_sanitizer_test.js.source.html#line16">Code &raquo;</a>
  </td>
     </tr>


     <tr class="odd entry public">
       <td class="access"></td>





  <a name="goog.labs.html.scrubber"></a>

  <td>


     <div class="arg">
        <img align="left" src="static/images/blank.gif">

        <span class="entryNamespace">goog.labs.html.</span><span class="entryName">scrubber</span>
        : 
     </div>


     <div class="entryOverview">
       <span class='nodesc'>No description.</span>
     </div>

  </td>


  <td class="view-code">
     <a href="local_closure_goog_labs_html_scrubber.js.source.html#line24">Code &raquo;</a>
  </td>
     </tr>


  </table>
</div>
      <!-- Column 1 end -->
    </div>

        <div class="col2">
          <!-- Column 2 start -->
          <div class="col2-c">
            <h2 id="ref-head">Package labs</h2>
            <div id="localView"></div>
          </div>

          <div class="col2-c">
            <h2 id="ref-head">Package Reference</h2>
            <div id="sideTypeIndex" rootPath="" current="labs.html"></div>
          </div>
          <!-- Column 2 end -->
        </div>
</div>
</div>

</body>
</html>
